Homepage

Find out if you have vulnerabilities that put you at risk

Test your applications
Toggle filtering controls
Report a new vulnerability
  • M
Information Exposure
Affects silverstripe/framework | Versions >=4.0.0-rc1, <4.0.1
Has fix
ComposerPublished 28 May 2024
  • H
Missing Encryption of Sensitive Data
Affects silverstripe/framework | Versions >=3.5.0-rc1, <3.5.6>=3.6.0-rc1, <3.6.3>=4.0.0-rc1, <4.0.1
Has fix
ComposerPublished 28 May 2024
  • H
SQL Injection
Affects silverstripe/framework | Versions >=3.5.0-rc1, <3.5.6>=3.6.0-rc1, <3.6.3>=4.0.0-rc1, <4.0.1
Has fix
ComposerPublished 28 May 2024
  • H
Session Fixation
Affects silverstripe/framework | Versions >=3.5.0-rc1, <3.5.6>=3.6.0-rc1, <3.6.3
Has fix
ComposerPublished 28 May 2024
  • M
Cross-site Scripting (XSS)
Affects silverstripe/framework | Versions >=3.4.0-rc1, <3.4.6>=3.5.0-rc1, <3.5.4
Has fix
ComposerPublished 28 May 2024
  • M
Cross-site Scripting (XSS)
Affects silverstripe/framework | Versions >=3.4.0-rc1, <3.4.6>=3.5.0-rc1, <3.5.4
Has fix
ComposerPublished 28 May 2024
  • M
Information Exposure
Affects silverstripe/framework | Versions >=3.4.0-rc1, <3.4.6>=3.5.0-rc1, <3.5.4
Has fix
ComposerPublished 28 May 2024
  • M
Cross-site Scripting (XSS)
Affects silverstripe/framework | Versions >=3.1.19-rc1, <3.1.20>=3.2.4-rc1, <3.2.5>=3.3.2-rc1, <3.3.3>=3.4.0-rc1, <3.4.1
Has fix
ComposerPublished 28 May 2024
  • M
Cross-site Scripting (XSS)
Affects silverstripe/framework | Versions >=3.1.19-rc1, <3.1.20>=3.2.4-rc1, <3.2.5>=3.3.2-rc1, <3.3.3>=3.4.0-rc1, <3.4.1
Has fix
ComposerPublished 28 May 2024
  • M
Cross-site Scripting (XSS)
Affects silverstripe/framework | Versions >=3.1.0-rc1, <3.1.21>=3.2.0-rc1, <3.2.6>=3.3.0-rc1, <3.3.4>=3.4.0-rc1, <3.4.2
Has fix
ComposerPublished 28 May 2024
  • M
Cross-site Scripting (XSS)
Affects silverstripe/framework | Versions >=3.4.0-rc1, <3.4.4>=3.5.0-rc1, <3.5.2
Has fix
ComposerPublished 28 May 2024
  • L
Insufficient Session Expiration
Affects silverstripe/framework | Versions >=3.1.19-rc1, <3.1.20>=3.2.4-rc1, <3.2.5>=3.3.2-rc1, <3.3.3>=3.4.0-rc1, <3.4.1
Has fix
ComposerPublished 28 May 2024
  • M
Cross-site Scripting (XSS)
Affects silverstripe/framework | Versions >=3.1.19-rc1, <3.1.20>=3.2.4-rc1, <3.2.5>=3.3.2-rc1, <3.3.3>=3.4.0-rc1, <3.4.1
Has fix
ComposerPublished 28 May 2024
  • M
Improper Authentication
Affects silverstripe/framework | Versions >=3.1.19-rc1, <3.1.20>=3.2.4-rc1, <3.2.5>=3.3.2-rc1, <3.3.3>=3.4.0-rc1, <3.4.1
Has fix
ComposerPublished 28 May 2024
  • M
Missing Authorization
Affects silverstripe/framework | Versions >=3.1.19-rc1, <3.1.20>=3.2.4-rc1, <3.2.5>=3.3.2-rc1, <3.3.3>=3.4.0-rc1, <3.4.1
Has fix
ComposerPublished 28 May 2024
  • L
Use of a One-Way Hash without a Salt
Affects silverstripe/framework | Versions >=3.1.19-rc1, <3.1.20>=3.2.4-rc1, <3.2.5>=3.3.2-rc1, <3.3.3>=3.4.0-rc1, <3.4.1
Has fix
ComposerPublished 28 May 2024
  • M
Improper Input Validation
Affects silverstripe/framework | Versions >=4.0.0-rc1, <4.0.4>=4.1.0-rc1, <4.1.1
Has fix
ComposerPublished 28 May 2024
  • M
Information Exposure
Affects silverstripe/framework | Versions >=4.0.0-rc1, <4.0.4>=4.1.0-rc1, <4.1.1
Has fix
ComposerPublished 28 May 2024
  • M
Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')CVE-2017-18049
Affects silverstripe/framework | Versions <3.5.6>=3.6.0, <3.6.3>=4.0.0, <4.0.1
Has fix
ComposerPublished 26 Apr 2024
  • M
Information ExposureCVE-2023-48714
Affects silverstripe/framework | Versions >=3.0.0, <4.13.39>=5.0.0, <5.1.11
Has fix
ComposerPublished 30 Jan 2024
  • M
Open RedirectCVE-2015-5062
Affects silverstripe/framework | Versions <3.1.14
Has fix
ComposerPublished 11 Sept 2023
  • M
Weak Password RequirementsCVE-2023-32302
Affects silverstripe/framework | Versions <4.13.14>=5.0.0, <5.0.13
Has fix
ComposerPublished 1 Aug 2023
  • M
Insecure PermissionsCVE-2023-22728
Affects silverstripe/framework | Versions >=4.0.0, <4.12.5
Has fix
ComposerPublished 27 Apr 2023
  • M
Open RedirectCVE-2023-22729
Affects silverstripe/framework | Versions >=4.0.0, <4.12.5
Has fix
ComposerPublished 27 Apr 2023
  • M
Cross-site Scripting (XSS)CVE-2022-37430
Affects silverstripe/framework | Versions >=3.0.0, <4.11.13
Has fix
ComposerPublished 21 Nov 2022
  • M
Cross-site Scripting (XSS)CVE-2022-37429
Affects silverstripe/framework | Versions >=3.0.0, <4.11.13
Has fix
ComposerPublished 21 Nov 2022
  • H
SQL InjectionCVE-2022-38148
Affects silverstripe/framework | Versions >=3.0.0, <4.10.11>=4.11.0, <4.11.14
Has fix
ComposerPublished 21 Nov 2022
  • M
Cross-site Scripting (XSS)CVE-2022-38462
Affects silverstripe/framework | Versions >=3.0.0, <4.11.13
Has fix
ComposerPublished 21 Nov 2022
  • M
Cross-site Scripting (XSS)CVE-2022-38724
Affects silverstripe/framework | Versions >=4.0.0, <4.11.13
Has fix
ComposerPublished 21 Nov 2022
  • M
Denial of Service (DoS)CVE-2021-41559
Affects silverstripe/framework | Versions <4.10.9
Has fix
ComposerPublished 28 Jun 2022